We have tried to integrate the Microsoft 0365 adapter and when refreshing the token we receive the attached error. The customer are not willing to provide GA roles nor Cloud Admin Roles. 2FA is not enabled as well as per the attached doc on permissions.

Can you please advise what roles and permissions are exactly required for this to work.

@ChrisG - We have done the following or should i say the Azure Team: In the provided doc (Adapters Guide) they say: Page 222-224 has been completed previously. Page 223 Point 13 it doesn’t mention that it asks for an Azure account? As per the 1st attachment here the account has the Application Admin Role (see Pic 1 and 2) It complained that the service account did not have access and they have been through the doc and granted admin consent for all that it requires for AD and MS Graphs. (See pic 3 and 4 attached)